Skip to content
Skip to content

Once both letters are recorded as sent, write a line on how it ended on the incident page and choose Close the incident.

The screen offers closing only after you have recorded both letters as sent. Until then step 03 reads that it opens once both are recorded. Once both are recorded and the incident is still open, the register shows it as not yet closed.

  1. 1 Open the incident from the Breach register.
  2. 2 Find step 03, Close the incident. The Close the incident button at the top of the page takes you to the same box. It does not close anything.
  3. 3 Under How was it resolved?, write how it ended, from 3 to 600 characters.
  4. 4 Choose Close the incident under the box. There is no second confirmation.

Anyone whose role holds the Record and handle breach incidents switch can close an incident.

What closing does:

  • ✓The incident moves to Closed on the register. It shows your line, the date and the email address of the person who closed it.
  • ✓It stays on the register. The incident and the letters as you recorded them are in your evidence export.
  • ✓Your audit trail gets a line that the incident was closed. It carries the fingerprint of your closing line.
  • ✓The red dot on your account button at the bottom of the left rail goes once no incident on the register is open.
  • ✗A closed incident no longer changes. You cannot edit it or record another send.
  • ✗The screen has no way to reopen it. If a further breach happens, record a new one.